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TITLE OF THE INVENTION 
CONTENT PROCESSING SYSTEM AND CONTENT PliOTECTING METHOD 
CROSS-REFERENCE TO RELATED APPlJiCATIONS 
This application is based upon and 
benefit of priority from the prior Japain 
Application No. 2000-069262, filed March 13, 2000, the 
entire contents of which are incorporatisd herein by- 
reference. 

BACKGROUND OF THE INVENTljON 

The present invention relates to 
processing system capable of processing 
contents such as image data and sound data, and a 
content protecting method. 

Recently, with the advance of computer 
technologies, various electronic appareituses such as 
multimedia personal computers, set- top boxes, players, 
and game machines have been developed . The electronic 
apparatuses of this type can reproduce diverse digital 
contents such as image data and sound data stored in 
recording media, and can also use digital contents by 
downloading them through, e.g., the Internet. 

These digital contents can be copied or downloaded 
without being degraded by the use of digital encoding 
technologies such as MPEG2 and MPS. Eence, the 
necessity of technologies for protecting such digital 
contents from illegal use is being demanded from the 
viewpoint of copyright protection. 
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Recently, therefore, these 
authentication and encryption are 
developed primarily for memory cards 
media, which allow exchange of contents 
electronic apparatuses having a valid 
protecting function and recording media 

A representative authentication 
technology is a mechanism which performs 
by using device identification 
electronic apparatus and a key matrix 
list information recorded on a recordir^g 
thereby eliminating invalid electronic 
issuing an encryption key to valid 
apparatuses. By using this mechanism, 
by simply updating only the revocation 
recorded on a recording medium before 
nullify the use of device identif icatic|n 
found to be hacked, thereby protecting 
illegal attacks. 

As the data size of the revocatior^ 
tion is increased, the number of the 
device identification information to 
be increased. Accordingly, the data s 
as large as possible. 

In practice, however, different 
media have largely different storage 
Therefore, if pieces of revocation lisi: 
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having a common size are used between 
of media, various problems arise. For 
size of the revocation list information 
for a recording medium such as a memory 
relatively small storage capacity, a 
allocated as a user data area is reduce^ 
number of device identification 
be authenticated by the revocation list 
finite. Hence, if common revocation li 
is defined between different types of 
such as an insufficient number of all 
identification information arise. 

On the other hand, when revocation 
corresponding device identification 
defined for each type of recording 
possible to use revocation list informdt 
size optimum for each recording media 
is the case, however, an apparatus, such 
computer, capable of handling various 
recording media poses the following 
to the compatibility between the 

For example, an application program 
valid apparatus which is assigned device 
information for a memory card can 
a memory card to be used, by performing 
by using the device identification 
apparatus and revocation list informat 
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recorded on the memory card. However, yhen a recording 
medium, such as a DVD-RAM, other than a| memory card is 
to be handled, processing such as transfer of a content 
from the memory card to the DVD-RAM cannot be performed 
because revocation list information previously recorded 
on the DVD-RAM cannot be processed by the device 
identification information for a memoryj card. 
Accordingly, even when a user has purchased a valid 
DVD-RAM drive corresponding to a copyrijght protecting 
function, DVD-RAMs cannot be actually hjandled similarly 
to memory cards. This is very inconvenjient for the 
user. I 

BRIEF SUMMARY OF THE INVENTION 
Accordingly, it is an object of the present 
invention to provide a content processijng system and 
content protecting method capable of halndling a 
recording medium of a certain media typje by using 
device identification information correisponding to 
another specific media type, and also capable of 
equally handling valid recording media corresponding to 
a copyright protecting function regardless of the types 
of these media. 

According to one aspect of the present invention, 
there is provided a content processing 
in an electronic apparatus, comprising: 
acquiring first revocation list informcition corre- 
sponding to a first media type; and means for recording 



system for use 
means for 
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the first revocation list information 
medium of a second media type, the recolrded 
revocation list information being used 
tion between the electronic apparatus a^id 
medium of the second media type. 

According to another aspect of the 
invention, there is provided a content 
method comprising the steps of: loading 
tion list information corresponding to 
type into an electronic apparatus; recording 
first revocation list information on a 
of a second media type; and using the 
revocation list information in authentibation 
the electronic apparatus and the recording 
the second media type. 

Additional objects and advantages 
will be set forth in the description which 
in part will be obvious from the describt 
learned by practice of the invention, 
advantages of the invention may be real, 
obtained by means of the instrumentalities 
combinations particularly pointed out 
BRIEF DESCRIPTION OF THE SEVERAL VIEW£; 

The accompanying drawings, which ^re 
in and constitute a part of the specifi 
illustrate presently preferred embodiments 
invention, and together with the generdl 
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aining the 

ion used in the 



given above and the detailed descriptio)i of the 
preferred embodiments given below, servb to explain the 
principles of the invention. 

FIG. 1 is a block diagram showing 
configuration of a content processing 
to an embodiment of the present invention 

FIGS. 2A and 2B are views for explaining 
relationship between a media key block 
used in the system of the embodiment; 

FIGS. 3A and 3B are views for expli 
principle of content encryption/decrypt 
system of the embodiment; 

FIG. 4 is a view for explaining 
media key block writing process 
of the embodiment; 

FIG. 5 is a view for explaining 
content writing process performed by 
embodiment ; and 

FIG. 6 is a view for explaining 
content reproducing process performed 
the embodiment. 

DETAILED DESCRIPTION OF THE I1^VENTI0N 

An embodiment of the present 
described below with reference to the 
drawing . 

FIG. 1 shows the system conf iguratiion of a content 
processing system according to an embodiment of the 
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present invention. This content proces 
processes various digital contents such 
and sound data and includes an electronjLc 
such as a personal computer. A content 
method of this content processing system 
the management of content encryption 
use of a media-unique key unique to eacii 
medium for recording contents. This is 
contents of the same recording medium 
even when the medium is used by another 
computer or electronic apparatus. Cont( 
encrypted and recorded on each recording 
using a media-unique key obtained by 
the medium. 

Management of content encryption 
the media-unique key is executed by a 
processing application program 301 i 
function dedicated to the management, 
program 301 is implemented as tambour 
software. Tambour resistant software 
function against attacks such as illega]. 
analysis and alteration. 

In this embodiment, an SD (Secure 
card 101 and a DVD-RAM 201 are used as 
used to record and read out content, 
the SD memory card 101 are performed vi 
interface 102 of this electronic apparatus 
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driver 302 as a device driver program 
an SD card. Read and write of the DVD- 
performed by a DVD-RAM drive 202 connecjted 
IDE/ATAPI interface 203 of the electronic 
a DVD-RAM driver 303 as a device driver 
controlling the DVD-RAM drive 202. 

The SD driver 302 and the DVD-RAM 
also implemented as tambour resistant 

In this embodiment, content 
management using these recording media 
using revocation list information 
on each recording medium and device 
information previously prepared for eac 
apparatus and unique to that electronic 

The revocation list information is 
information in which a list of device i 
information of electronic apparatuses 
for content protection is embedded, 
is used to check whether the device idi 
information of an electronic apparatus 
authenticated is to be nullified, and 
media-unique key if the device identification 
information is found to be valid. This 
information is made up of a large number 
key matrix information and is referred 
key block (MKB) hereinafter. A recordilng 
to have a valid copyright protecting fujnction is 
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shipped with the media key block (MKB) 

The device identification 
identification information assigned to 
apparatus, and is issued only to an 
apparatus found to have a valid copyrigjjit 
function. Each electronic apparatus is 
this device identification information 
In the following description, the devic^ 
information is referred to as a device 

The content of the media key block 
from one recording medium to another, 
key blocks (MKBs) are used in the SD m< 
and the DVD-RAM 201. That is, a media 
{MKB_SD1) defined for an SD memory card 
recorded on the SD memory card 101. 
block (MKB_RAM) defined for a DVD-RAM i 
recorded on the DVD-RAM 201. These 
are recorded in write-protected read 
in a system area of the SD memory card 
lead-in area of the DVD-RAM 201. 

A device key (DevKEY_SD) assigned 
electronic apparatus of this embodiment 
the media key block for an SD memory ca: 
application program 301 performs authen 
SD memory card 101 by using this device 
when the SD memory card 101 is found to 
this authentication, the application pr( 
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generates a media-unique key (Kmu_SDl) 
key unique to the SD memory card 101 by 
key obtained by the authentication 
ID (Media IDl) as identification 
the SD memory card 101. Encryption and 
content to be recorded on the SD memory 
managed by using the media-unique key ( 
is, the application program 301 writes 
data on the SD memory card 101. 

•Ktl [Content] : a content encrypted 
key called a title key Ktl 

•Kmu_SDl [Ktl ] : a title key encrypted 
media-unique key (Kmu_SDl) of the SD 

Note that a time variable key usi 
numbers can be used as the title key Kt 

The DVD-RAM driver 303 provides th 
program 301 with a function of handling 
similarly to an SD memory card. All of 
between the application program 301 and 
and read and write of the DVD-RAM 201 
tion progrcim 301 are performed via the 
driver 303. 

The DVD-RAM driver 303 has a device 
(DevKEY_RAM) corresponding to a media k 
(MKB_RAM) for a DVD-RAM, and can perf< 
of the DVD-RAM 201. This DVD-RAM drive^ 
includes the following functions: 
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•a function of acquiring the latest: 
block (MKB_SD2) for an SD memory card f 
or from an installation CD of the DVD 
and writing this media key block in the 
of the DVD-RAM 201 

•a function of reading out the lat« 
block (MKB_SD2) for an SD memory card 
media key block (MKB_RAM) for a DVD-RAM 
a request for authentication of the DVD 
the application program 301, and 
readout media key block to the applic 

Details of these functions will be 
with reference to the accompanying 
(Media Key Block) 

The relationship between the media 
the device key will be described below 
to FIGS. 2A and 2B. 

As described above, the media key 
device key are defined for each type of 
medium. FIG. 2A shows the relationship 
media key block (MKB_SD1) and the device 
{DevKEY_SD) for an SD memory card. The 
(DevKEY_SD) includes 16 columns of in< 
16 columns of corresponding pieces of 
(KEY). The media key block (MKB_SD1) 
encrypted key matrices of about 16 co 
The value of the index in each column 
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(DevKEY_SD) indicates the reference 
media key block (MKB_SD1); key 
position which is in the same column as 
and which is indicated by the value of 
looked up. For example, when the index 
first column is "1" as shown in FIG. 2A 
in the first column and the first row 
block (MKB_SD1) is looked up. In this 
media key A [Km] encrypted by the key ( 
example) in the first column of the dev 
(DevKEY_SD) or an error code A[Ec] is 
error code means that the corresponding 
invalid. Authentication is successful 
encrypted by the corresponding key i 
is acquired by one of the 16 indices, 
arrangement, a maximum of 512^^ device 
nullified. 

FIG. 2B shows the relationship be 
key block (MKB_RAM) and the device key 
for a DVD-RAM. The device key (DevKEY 
16 columns of indices (INDEX) and 16 c^ 
corresponding pieces of key information 
media key block (MKB_RAM) includes ei 
matrices of about 16 columns x 2,048 
this media key block (MKB_RAM) can null 
2,04816 device keys. 
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(Encryption/Decryption of Content) 

The principle of encryption/decrypltion of a 
content performed by using a recording nedium will be 
described below with reference to FIGS. 3A and 3B. The 
principle will be explained by taking a^ SD memory card 
as an example. 
<Content Recording> 

FIG. 3A shows the flow of processing during 
content recording. First, authentication using the SD 
memory card device key (DevKEY_SD) and the media key 
block (MKBSDl) recorded on the SD memory card 101 is 
performed (process #1), and a media key Km is generated. 

The media-unique key (Kmu_SDl) is generated by an 
arithmetic operation (process #2) using the media key 
Km and the media ID (Media IDl) recorde|d on the SD 
memory card 101. Subsequently, a process (process #3) 
of encrypting a predetermined title kej Kt by the 
media-unique key (Kmu_SDl) is executed to generate 
Kmu_SDl[Kt]. Also, a process (process #4) of 
encrypting a content to be recorded by the title key Kt 
is performed to generate Kt[ Content]. Kmu_SDl[Kt] and 
Kt[ Content] are recorded on the SD memc|>ry card 101. 
<Content Reproduction> 

FIG. 3B shows the flow of processing during 
content reproduction. First, authentictation using the 
SD memory card device key (DevKEY_SD) and the media key 
block (MKB_SD1) recorded on the SD membry card 101 is 



performed (process #5), and the media k^y Km is 
generated. 

The media-unique key (Kmu_SDl) is 
arithmetic operation (process #6) using 
Km and the media ID (Media IDl) recorde^ 
memory card 101. Subsequently, a proc 
of decrypting the encrypted title key 
using the media-unique key (Kmu_SDl) is 
thereby obtaining the title key Kt 
(process #8) of decrypting the encryptdd 
Kt[ Content] by using the title key Kt 
thereby obtaining and reproducing the 
(Installation of DVD-RAM Driver) 

A process of writing the latest 
MKB_SD2 for an SD memory card into the 
be described below with reference to 

This writing process is performed 
of the DVD-RAM driver 303 when this dr: 
installed. After the installation, th€! 
can be executed at any arbitrary timing 
setup program included in the DVD-RAM 
Before the writing process is executed 
function of handling DVD-RAM similarly 
card?" is of course indicated to a use:j: 
writing process is executed only when 
the addition. 

Note that this installer (or setub 
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can also be regarded as a part of the DV^-RAM driver 
303, In this sense, the DVD-RAM driver ]303 itself 
writes the media key block MKB_SD2 . 

(51) The installer (or setup 
DVD-RAM device key ( DevKEY_RAM ) . The in 
setup program) 401 performs authenticati 
DVD-RAM 201 by using the device key ( 
the media key block (MKB_RAM) recorded i 
area of the DVD-RAM 201, thereby obtaining 
media-unique key (Kmu_RAM) (process #11) 
specifically, the media key Km is obtain 
looking up the media key block (MKB_RAM) 
device key ( DevKEY_RAM ) . The media-i 
(Kmu_RAM) is then generated from this 
the DVD-RAM inherent media ID (Media ID2 
the lead-in area of the DVD-RAM 201. 

(52) The installer (or setup progr^) 
acquires the latest media key block (MKB 
card memory from a WEB server 501 (procei 

(53) The installer (or setup progr, 
encrypts the media key block (MKB_SD2) b] 
media-unique key (Kmu_RAM) unique to a 
writes the result ( Kmu_RAM [ MKB_SD2 ] ) in 
area of the DVD-RAM 201 (process #13). 
(Writing of Content) 

An operation of writing a content iiti the DVD-RAM 
201 will be described below with reference to FIG. 5. 
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Assume that a content recorded on the SD 
101 is to be copied or transferred to th 

(Al) The application program 301 
authentication of the SD memory card 101 
driver 302 by using the device key (DevK 
media key block (MKB_SD1) recorded on 
card 101, thereby obtaining the media- 
(Kmu_SDl) (process #21). More specifi 
key Km is obtained first by looking up tl 
block (MKB_SD1) by using the device key 
The media-unique key (Kmu_SDl) is then 
this media key Km and the SD memory card 
ID (Media IDl) recorded on the SD memory 

(A2) The application program 301 
encrypted title key (Kmu_SDl [Kt ] ) from 
card 101 via the SD driver 302, and 
readout title key by using the media^ 
(Kmu_SDl) to obtain Kt (process #22). 

(A3) The application program 301 i 
for authentication of the DVD-RAM 201 to 
driver 303. In response to this request 
driver 303 performs authentication of thes 
by using the device key (DevKEY_RAM) and 
block (MKB_RAM) recorded in the lead-in . 
DVD-RAM 201, thereby obtaining the media- 
(Kmu_RAM) (process #23). More specific 
key Km is obtained first by looking up tlje 
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block {MKB_RAM) by using the device key ( DevKEY_RAM ) . 
The media-unique key (Kmu_RAM) is then gbnerated from 
this media key Km and the media ID (Media ID2) of the 
DVD-RAM 201. 

{A4) The DVD-RAM driver 303 reads 
encrypted media key block (Kmu_RAM[MKB_S^2 
on the DVD-RAM 201, and decrypts the re< 
block by using the media-unique key (Kmu 
MKB_SD2 (process #24). The DVD-RAM driver 
transfers this MKB_SD2 to the applicatio^ 

{A5 & A6) When acquiring MKB_SD2 
303, the application program 301 perform^ 
tion of the DVD-RAM 201 by using this 
the device key ( DevKEY_SD ) , thereby 
media-unique key (KmuSD2) (process #25) 
specifically, the media key Km is obtai: 
looking up the media key block (MKB_SD2) 
device key (DevKEY_SD). The media-uniqu 
is then generated from this media key Km 
ID (Media ID2) of the DVD-RAM 201. 

(A7) The application program 301 
title key Kt obtained in process #22 by 
media-unique key (Kmu_SD2), thereby obtaining 
Kmu_SD2[Kt]. The application program 301 writes this 
Kmu_SD2[Kt] into the DVD-RAM 201 via the DVD-RAM driver 
303 (process #26). 

(A8) The application program 301 l^ads the 
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applicatd on 



encrypted content (Kt [Content ] ) from the 
101, and writes the content into the DVD- 
the DVD-RAM driver 303. 
(Reproduction of Content) 

An operation by which the 
reproduces a content recorded on the DVD- 
be described below with respect to FIG. 

(Bl) The application program 301 
for authentication of the DVD-RAM 201 to 
driver 303. In response to this request 
driver 303 performs authentication of 
by using the device key (DevKEY_RAM) and 
block (MKB_RAM) recorded in the lead-in 
DVD-RAM 201, thereby obtaining the media- 
(KmuRAM) (process #31). More specific 
key Km is obtained first by looking up 
block (MKB_RAM) by using the device key 
The media-unique key (Kmu_RAM) is then 
this media key Km and the media ID (Med: 
DVD-RAM 201. 

(B2) The DVD-RAM driver 303 reads 
encrypted media key block (Kmu_RAM[MKB 
on the DVD-RAM201, and decrypts the rei 
block by using the media-unique key (Kmu 
MKB_SD2 (process #32). The DVD-RAM 
transfers this MKB_SD2 to the applic 

(B3 & B4) when acquiring MKB_SD2 
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using 
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303, the application program 301 perforir|s 
authentication of the DVD-RAM 201 by 
and the device key (DevKEY_SD), thereby 
media-unique key (Kmu_SD2) (process #33 
specifically, the media key Km is 
looking up the media key block (MKB_SD2 
device key ( DevKEY_SD ) . The media-uniqile 
is then generated from this media key Km 
ID (Media ID2) of the DVD-RAM 201. 

(B5) The application program 301 
encrypted title key (Kmu_SD2 [Kt ] ) from 
via the DVD-RAM driver 303, and decrypt! 
title key by using the media-unique key 
obtain Kt (process #34). 

(B6) The application program 301 
encrypted content ( Kt [ Content ] ) from thi 
via the DVD-RAM driver 303, and reprodu<:ei 
by decrypting it by using Kt (process # 

In this embodiment as described 
driver 303 as a control program for a D' 
records the media key block MKBSD for 
card on the DVD-RAM 201. By using this 
key block MKB_SD, the application progr 
authentication of the DVD-RAM 201. Thi^ 
DVD-RAM to be handled by the device key 
an SD memory card. Accordingly, valid : 
corresponding to a copyright protecting 
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eads out the 
DVD-RAM 201 
s the content 
)• 

, the DVD-RAM 
D-RAM drive 
n SD memory 
recorded media 
m 301 executes 

allows a 
DevKEY_SD for 
ecording media 
function can be 



:i5 



above 
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elate s 



possible 



medi a 



DVD- 



equal ly handled regardless of the types 

In particular, the media key block 
SD memory card is written in the DVD-RA]v 
being encrypted by Kmu_RAM obtained by 
using MKB_RAM. This consequently re! 
block MKB_SD to MKB_RAM, making it 
MKB_SD secret. 

In this embodiment, the latest 
MKB_SD2 is acquired and recorded on a 
an increase in the number of device keys 
eliminated. Therefore, if MKB_SD 
memory card is the latest or a relatively 
MKB_SD can be recorded on a DVD-RAM. 

Also, a title key as a content 
encrypted by using a media-unique key. 
also possible to use a media-unique key 
and encrypt a content by using this 

A similar method can be applied not 
DVD-RAM and SD memory card but also to v 
recording media. 

Furthermore, this embodiment is 
only to PCs but also to all data process 
(computer-applied apparatuses) using 
such as set-top boxes, game machines, 
players . 

Effects analogous to those of this 
readily obtainable by introducing a 



of these media. 
MKB_SD for an 

201 after 
uthentication 
the media key 
to keep 



key block 
RAM to meet 
to be 

d on an SD 
new one, this 



enciyption 



medi a- 



key is 
However, it is 
as a title key 
unique key. 
only to a 
arious other 



apE|)licable not 

ing apparatuses 
sors , 
audio/video 



mic roprocess 
and 



embodiment are 
comriuter program 
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recorciing 
ident.if ication 



describing the procedures of the content, 
method explained in the embodiment to a 
a computer-applied apparatus via a recojfding 

In the present invention as has be^n 
above, it is possible to handle a 
certain media type by using device 
information corresponding to another 
type, and to equally handle valid 
corresponding to a copyright protecting 
regardless of the types of these media, 
content management having high e: 
compatibility is implemented 

Additional advantages and 
readily occur to those skilled in the ai^t 
the invention in its broader aspects is 
the specific details and representative 
shown and described herein. Accordingly 
modifications may be made without depart 
spirit or scope of the general inventive 
defined by the appended claims and their 



spec 



recorcing 



extensibi lity 



modif icat.ions 



management 
computer or to 
medium, 
described 
medium of a 



ific media 
media 
function 
Accordingly, 
and high 



will 
Therefore, 
not limited to 
embodiments 

various 
ing from the 
concept as 
equivalents . 



